The MiniPlasma exploit targets CVE-2020-17103, a Windows vulnerability that should have been patched in December 2020.
Microsoft Exchange users are urged to mitigate a zero-day vulnerability that CISA has confirmed is under active exploitation.
Microsoft's May Patch Tuesday looked quiet. Since then, there's been an unpatched Exchange CVE, three Defender flaws, and a ...
Microsoft rushes to mitigate the new “YellowKey” flaw that may bypass BitLocker protections and expose encrypted Windows ...
A newly disclosed security flaw impacting NGINX Plus and NGINX Open has come under active exploitation in the wild, days ...
May 2026 dropped three critical Linux vulnerabilities on a near-weekly cadence, and the security discourse has mostly treated them as three separate bad days. They’re not. Together they form a ...
A cybersecurity researcher has released a proof-of-concept exploit for a Windows privilege escalation zero-day dubbed ...
If you received an unusual Snapchat-related message or link on your iPhone in recent months, you may have been in the ...
Data from the Zero Day Clock reveals that the weaponization window for vulnerabilities has plummeted from 15 months to just over a day, rendering traditional human-speed patch management obsolete and ...
Drupal warns users that it has seen attempts to exploit CVE-2026-9082 and security firms are seeing attacks against thousands ...
CISA added CVE-2026-20182, a CVSS 10.0 Cisco Catalyst SD-WAN Controller authentication bypass flaw, to its KEV catalog.
Concerns are high over a critical, recently disclosed remote code execution (RCE) vulnerability in Apache Struts 2 that attackers have been actively exploiting over the past few days. Apache Struts is ...